From 4d25f08f554fda6772969135fb42edbbcac8c2a3 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 17 Aug 2026 18:31:10 +0000 Subject: [PATCH] chore(deps): bump actions/checkout in the github-actions group Bumps the github-actions group with 1 update: [actions/checkout](https://github.com/actions/checkout). Updates `actions/checkout` from 4.2.2 to 7.0.1 - [Release notes](https://github.com/actions/checkout/releases) - [Commits](https://github.com/actions/checkout/compare/v4.2.2...v7.0.1) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/ci.yml | 16 ++++++++-------- .github/workflows/coverage.yml | 6 +++--- .github/workflows/infisical.yml | 2 +- .github/workflows/security.yml | 10 +++++----- .github/workflows/trunk-check.yml | 2 +- 5 files changed, 18 insertions(+), 18 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 9bb9dfe..320ddc9 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -26,7 +26,7 @@ jobs: has_security: ${{ steps.detect.outputs.has_security }} has_trunk: ${{ steps.detect.outputs.has_trunk }} steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@v7.0.1 with: fetch-depth: 1 @@ -84,7 +84,7 @@ jobs: runs-on: ubuntu-latest continue-on-error: true steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@v7.0.1 - uses: dtolnay/rust-toolchain@stable - uses: Swatinem/rust-cache@v2 - name: cargo fmt --check @@ -104,7 +104,7 @@ jobs: runs-on: ubuntu-latest continue-on-error: true steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@v7.0.1 - uses: dtolnay/rust-toolchain@stable - name: cargo-deny check uses: EmbarkStudios/cargo-deny-action@v2 @@ -118,7 +118,7 @@ jobs: runs-on: ubuntu-latest continue-on-error: true steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@v7.0.1 - uses: actions/setup-python@v7 with: python-version: '3.11' @@ -136,7 +136,7 @@ jobs: runs-on: ubuntu-latest continue-on-error: true steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@v7.0.1 - uses: actions/setup-go@v7 with: go-version: '1.22' @@ -154,7 +154,7 @@ jobs: runs-on: ubuntu-latest continue-on-error: true steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@v7.0.1 - uses: actions/setup-node@v7 with: node-version: '20' @@ -178,7 +178,7 @@ jobs: runs-on: ubuntu-latest continue-on-error: true steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@v7.0.1 - name: gitleaks uses: gitleaks/gitleaks-action@v3 env: @@ -190,7 +190,7 @@ jobs: runs-on: ubuntu-latest continue-on-error: true steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@v7.0.1 - uses: actions/dependency-review-action@v5 with: fail-on-severity: low diff --git a/.github/workflows/coverage.yml b/.github/workflows/coverage.yml index 0a7ff27..a4763c8 100644 --- a/.github/workflows/coverage.yml +++ b/.github/workflows/coverage.yml @@ -19,20 +19,20 @@ jobs: if: ${{ !contains(env.SKIP, 'lint') }} runs-on: ubuntu-latest steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@v7.0.1 - name: Run lint run: echo "Running language-specific lint" test: if: ${{ !contains(env.SKIP, 'test') }} runs-on: ubuntu-latest steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@v7.0.1 - name: Run tests run: echo "Running language-specific tests" coverage: if: ${{ !contains(env.SKIP, 'coverage') }} runs-on: ubuntu-latest steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@v7.0.1 - name: Generate coverage run: echo "Generating coverage (language-specific)" \ No newline at end of file diff --git a/.github/workflows/infisical.yml b/.github/workflows/infisical.yml index a46d496..670e7c6 100644 --- a/.github/workflows/infisical.yml +++ b/.github/workflows/infisical.yml @@ -20,7 +20,7 @@ jobs: timeout-minutes: 5 steps: - name: Checkout - uses: actions/checkout@v7 + uses: actions/checkout@v7.0.1 - name: Install Infisical CLI run: | diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml index 1e16ca8..5960f6a 100644 --- a/.github/workflows/security.yml +++ b/.github/workflows/security.yml @@ -25,7 +25,7 @@ jobs: contents: read packages: read steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@v7.0.1 - uses: github/codeql-action/init@v4 with: languages: python @@ -38,7 +38,7 @@ jobs: name: Dependency audit runs-on: ubuntu-latest steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@v7.0.1 - name: pip-audit run: | pip install pip-audit @@ -48,7 +48,7 @@ jobs: name: Gitleaks secret scan runs-on: ubuntu-latest steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@v7.0.1 with: fetch-depth: 0 - name: Run gitleaks @@ -60,7 +60,7 @@ jobs: name: SBOM generation (CycloneDX) runs-on: ubuntu-latest steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@v7.0.1 - name: Generate SBOM (syft) uses: anchore/sbom-action@v0 with: @@ -73,7 +73,7 @@ jobs: runs-on: ubuntu-latest needs: [codeql, dependency-audit, gitleaks] steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@v7.0.1 - name: Generate SLSA provenance attestation uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v2.1.0 with: diff --git a/.github/workflows/trunk-check.yml b/.github/workflows/trunk-check.yml index cb61980..3a3d5e7 100644 --- a/.github/workflows/trunk-check.yml +++ b/.github/workflows/trunk-check.yml @@ -49,7 +49,7 @@ jobs: steps: - name: Checkout - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Install Prettier shell: bash